microsoft word 2007.exe

Rak

Migopeho

The application microsoft word 2007.exe, “Rak Setup ” has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Migopeho

Product:
Rak

Description:
Rak Setup

MD5:
c313d6831aece7e0500e2cf0cedc3e0a

SHA-1:
7018f0c30de56a72561e3e09aec433663a15f086

SHA-256:
b4610dbbcf8a5a745f6a24a0c9166d14d3bec762c999fb41c91acc4b545cbc6a

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
12/26/2024 5:22:39 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.RE11 (M)
16.4.13.15

File size:
990.4 KB (1,014,159 bytes)

Product version:
1.1.2

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\microsoft word 2007.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:d615G+2R0mHqtlcxbj2NxkxGC/BmtN5K7VQVrB/VHk3ZbPv8v:dYn5Wp2NxvNK8rcZbPv8v

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file microsoft word 2007.exe has been seen being distributed by the following 45 URLs.

http://www.signtowntoday.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

http://www.bytesendclear.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

Latest 30 of 45 download URLs

Remove microsoft word 2007.exe - Powered by Reason Core Security